A security flaw has been discovered in musl libc up to 1.2.6. Affected is the function iconv of the file src/locale/iconv.c of the component GB18030 4-byte Decoder. Performing a manipulation results in inefficient algorithmic complexity. The attack must be initiated from a local position. To fix this issue, it is recommended to deploy a patch.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A security flaw has been discovered in musl libc up to 1.2.6. Affected is the function iconv of the file     src/locale/iconv.c of the component GB18030 4-byte Decoder. Performing a manipulation results in     inefficient algorithmic complexity. The attack must be initiated from a local position. To fix this issue,     it is recommended to deploy a patch. (CVE-2026-6042)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A security flaw has been discovered in musl libc up to 1.2.6. Affected is the function iconv of the file
    src/locale/iconv.c of the component GB18030 4-byte Decoder. Performing a manipulation results in
    inefficient algorithmic complexity. The attack must be initiated from a local position. To fix this issue,
    it is recommended to deploy a patch. (CVE-2026-6042)

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - A security flaw has been discovered in musl libc up to 1.2.6. Affected is the function iconv of the file
    src/locale/iconv.c of the component GB18030 4-byte Decoder. Performing a manipulation results in
    inefficient algorithmic complexity. The attack must be initiated from a local position. To fix this issue,
    it is recommended to deploy a patch. (CVE-2026-6042)

  - An issue was discovered in musl libc 0.7.10 through 1.2.6. Stack-based memory corruption can occur during
    qsort of very large arrays, due to incorrectly implemented double-word primitives. The number of elements
    must exceed about seven million, i.e., the 32nd Leonardo number on 32-bit platforms (or the 64th Leonardo
    number on 64-bit platforms, which is not practical). (CVE-2026-40200)

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can
    trigger iconv conversion of untrusted EUC-KR text to UTF-8. (CVE-2025-26519)

  - A security flaw has been discovered in musl libc up to 1.2.6. Affected is the function iconv of the file
    src/locale/iconv.c of the component GB18030 4-byte Decoder. Performing a manipulation results in
    inefficient algorithmic complexity. The attack must be initiated from a local position. To fix this issue,
    it is recommended to deploy a patch. (CVE-2026-6042)

ID	Name	Product	Family	Severity
307034	Linux Distros Unpatched Vulnerability : CVE-2026-6042	Nessus	Misc.	medium
440285	Alpine: multiple musl packages: security update to 1.2.5-r22	Tenable Cloud Security	Alpine Linux Local Security Checks	medium
440285	Alpine: multiple musl packages: security update to 1.2.5-r22	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	medium
440284	Alpine: multiple musl packages: security update to 1.2.5-r11	Tenable Cloud Security	Alpine Linux Local Security Checks	medium
440284	Alpine: multiple musl packages: security update to 1.2.5-r11	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	medium
440283	Alpine: multiple musl packages: security update to 1.2.5-r2	Tenable Cloud Security	Alpine Linux Local Security Checks	medium
440283	Alpine: multiple musl packages: security update to 1.2.5-r2	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	medium
440282	Alpine: multiple musl packages: security update to 1.2.4_git20230717-r6	Tenable Cloud Security	Alpine Linux Local Security Checks	medium
440282	Alpine: multiple musl packages: security update to 1.2.4_git20230717-r6	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	medium
427813	Alpine: multiple musl packages: security update to 1.2.5-r10	Tenable Cloud Security	Alpine Linux Local Security Checks	medium
427813	Alpine: multiple musl packages: security update to 1.2.5-r10	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	medium

Detections

Analytics

CVE-2026-6042

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium